Creating an encrypted cloud-container storage pool

The IBM Storage Protect server allows you to create off-premises and on-premises cloud-container storage pools to store your encrypted data.

About this task

The encryption of data is enabled by default for all cloud-container storage pools.

Procedure

To create a cloud-container storage pool, complete the following steps:

  • Using the Operations Center
    1. On the Operations Center menu bar, click Storage > Storage Pools.
    2. On the Storage Pools page, click + Storage Pool.
    3. Complete the following steps in the Add Storage Pool wizard:
      1. On the Type page, select the type of cloud-container storage pool. The Add Storage Pool wizard configures the cloud-container storage pool to be encrypted.

        Tip: You can use the Add Storage Pool wizard to create an on-premises cloud-container storage pool. Because of performance impact, you may choose not to encrypt on-premises pools.
      2. If database backups are not configured to include the master encryption key, the Add Storage Pool wizard displays a Protect Encryption Keys page. Specify a password to protect the master encryption key.

        Important: Store the password in a secure location. You cannot recover the master encryption key without this password.
  • Using the command-line administrative client
    1. Issue the DEFINE CONNECTION command with the appropriate parameter values for the cloud provider and credentialed for the bucket.
      DEFINE CONNECTION connection_name CLOUDTYPE=cloud_system_type CLOUDURL=cloud_url
    2. Issue the DEFINE STGPOOL command with the STGTYPE=CLOUD parameter.
      DEFINE STGPOOL poolname STGTYPE=CLOUD CONNECTION=connection_name ENCRypt=Yes
      Tip: Depending on the type of cloud computing system, other parameters might be required. For more information, see DEFINE STGPOOL (Define a storage pool).